Privacy Policy

The Clinic collects only the minimum information necessary to respond to booking and enquiry requests. We do not collect resident registration numbers or other unique identifiers through the website.

• Required: name, contact number (mobile phone)
• Optional: email address, nationality, treatment of interest, enquiry message
• When using chat channels (Channel Talk, KakaoTalk, WhatsApp): the content of your messages and any profile identifiers provided by that service
• Automatically generated during use: access IP address, browser/device information, visit date and time, cookies, and anti-abuse (reCAPTCHA) data

If you visit the Clinic and receive treatment, additional health information (sensitive data) is collected and processed for that treatment. Such information is managed separately under the Medical Service Act at the point of care, not through this website (see Section 11).

• Receiving and responding to booking and enquiry requests; identity verification and contact
• Treatment consultation, guidance, and appointment scheduling
• Notifying you of the outcome of your enquiry and relevant clinic information
• Preventing spam and abuse and maintaining service stability
• Analysing usage statistics and improving service quality

The Clinic does not use collected personal information for purposes other than those stated above. Where the purpose changes, we obtain separate consent or take other required measures under Article 18 of PIPA.

The Clinic destroys personal information without delay once its purpose has been achieved, except where retention is required by law.

• Booking and enquiry data: destroyed within one year of completing the enquiry/consultation (or without delay upon your earlier request)
• Medical records, if you receive treatment: retained separately under the Medical Service Act (see Section 11)

As a rule, the Clinic does not provide your personal information to outside parties. Exceptions are made only in the following cases:

• Where you have given prior consent to the provision
• Where required by specific provisions of law, or requested by an investigative agency in accordance with the procedures and methods prescribed by law

To provide its services, the Clinic entrusts certain processing tasks to the companies below. Consignment contracts set out safeguards for the secure handling of personal information, and the Clinic supervises the processors accordingly.

Any change to the entrusted tasks or the processors will be disclosed through this Privacy Policy.

Some of the cloud infrastructure and services used by the Clinic are provided by companies located outside Korea. Personal information may therefore be transferred abroad as set out below; transfer occurs over the network at the time the service is used.

If you do not wish your personal information to be transferred abroad, you may contact the Clinic by phone or email, or use a domestic consultation channel (Channel Talk, KakaoTalk, or telephone).

You (the data subject) may exercise the following rights regarding your personal information at any time:

• Request access to your personal information
• Request correction of errors
• Request deletion
• Request suspension of processing and withdraw consent

You may exercise these rights by contacting the Privacy Officer or the department below in writing, by phone, or by email, and the Clinic will act without delay. Personal information of children under 14 is processed with the consent of their legal representative, who may exercise the child’s rights.

• Procedure: personal information whose retention period has expired or whose purpose has been achieved is destroyed without delay in accordance with internal policy and applicable law.
• Method: electronic files are deleted using technical means that make recovery impossible; paper documents are shredded or incinerated.

The Clinic takes the following measures to process personal information securely:

• Administrative: an internal management plan, minimising and controlling staff access, and regular training
• Technical: access control to the processing system (administrator authentication), encryption in transit (HTTPS/TLS), and retention and tamper-protection of access logs
• Physical: access control to locations where data is stored

The Clinic may use cookies and similar technologies to provide a convenient service. Cookies are used to maintain sessions and to enable certain features such as abuse prevention (reCAPTCHA) and maps.

You may refuse or delete cookies through your web browser settings. Refusing cookies may limit the use of some services. Google’s privacy policy also applies to reCAPTCHA and Google Maps.

If you visit the Clinic and receive treatment, health information (sensitive data) is collected and processed for diagnosis and care. Medical records created during treatment are prepared, retained, and managed under the Medical Service Act and its Enforcement Rule, separately from the online enquiry information on this website.

A booking or enquiry made through the website is not itself a treatment contract; actual treatment and the creation of medical records take place after your visit.

The Clinic has designated a Privacy Officer who oversees personal information processing and handles user complaints and remedies.

• Privacy Officer: Kim Su-wan (Director)
• Department for access requests: SU Dental Hospital front-office team
• Phone: +82 02-512-7528
• Email: sudentalno1@gmail.com
• Address: 823 Seolleung-ro, Gangnam-gu, Seoul, Republic of Korea (Hanyang Town, 3F)

You may direct any privacy-related enquiry, complaint, or request for remedy to the contact above, and the Clinic will respond without delay.

To seek relief for a privacy infringement, you may apply for dispute resolution or counselling to the following bodies:

• Personal Information Dispute Mediation Committee: +82 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office, Cybercrime Investigation: 1301 (www.spo.go.kr)
• National Police Agency, Cyber Bureau: 182 (ecrm.police.go.kr)

This Privacy Policy may be revised in line with changes in law, government guidelines, or the Clinic’s internal policy. Any change will be announced on the website; material changes will be announced at least 7 days before they take effect (30 days where they significantly affect your rights).